Nysa Technology

BACKGROUND

Please describe your company and position.

I am the CISO of a cardiac health company.

Describe what your company does in a single sentence.

Cardiac Health

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Nysa Technology to accomplish?

• HiTrust SCF Hands on vCISO
• HIPAA Hands on vCISO
• Policy Development

SOLUTION

How did you find Nysa Technology?

Referral

Why did you select Nysa Technology over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Nysa Technology were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Nysa Technology as our virtual CISO to help us achieve HITRUST CSF certification and strengthen our HIPAA compliance program. Pedram and his team conducted a thorough gap assessment, developed our security policies and procedures, and guided us through the entire HITRUST R2 validated assessment process from start to finish. They established our risk management framework, handled vendor risk management, and trained our workforce on security awareness. What stood out most was their hands-on approach and deep expertise — they didn't just advise, they delivered. We achieved certification with zero critical findings. I highly recommend Nysa Technology to any healthcare organization serious about cybersecurity and compliance.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Successfully achieved HITRUST CSF R2 certification with zero critical findings. Completed full HIPAA Security Rule gap remediation across all required domains. Reduced our overall security risk score by over 60%. All project milestones were delivered on time and within scope. Our organization passed the third-party validated assessment on the first attempt, avoiding costly re-assessments. Staff security awareness scores improved significantly following training. We now have a fully documented security program and risk management framework in place.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Nysa Technology was highly organized and professional throughout the entire engagement. They delivered all milestones on time and kept us informed at every stage of the process. Pedram was extremely responsive — whenever we had questions or concerns, we received clear answers quickly. They proactively flagged potential risks before they became issues and adjusted the approach when our internal priorities shifted. Communication was transparent and consistent, with regular status updates and clear documentation. It felt less like working with a vendor and more like having a trusted security partner embedded in our team.

What was your primary form of communication with Nysa Technology?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What sets Nysa Technology apart is the combination of deep technical expertise and real business understanding. Pedram doesn't just speak in technical jargon — he translates complex security requirements into clear, actionable steps that our leadership team could understand and act on. Having a CISSP, CISA, and ISO 27001 certified professional available to us at a fraction of the cost of a full-time CISO was a game changer for our organization. Most impressive was his hands-on involvement — he didn't hand us a report and walk away, he stayed with us through the entire certification journey. For a healthcare organization navigating HITRUST and HIPAA, that level of commitment and expertise is rare.

Are there any areas for improvement or something Nysa Technology could have done differently?

Nothing significant to note. If anything, I would have loved to have engaged Nysa Technology earlier in our growth stage — before compliance became urgent. The onboarding process was smooth, but organizations with limited internal IT resources may want to allocate extra time for the policy review phases. That said, Nysa Technology was very accommodating in working around our team's capacity. Overall, any areas for improvement are minor and did not impact the quality or outcome of the engagement.